Certificate 2261 - Cryptographic Module for CipherCloud Gateway
intCertNum 2261
strVendorName CipherCloud, Inc.
strURL http://www.ciphercloud.com
strAddress1 99 Almaden Blvd., Suite 500
strAddress2
strAddress3
strCity San Jose
strStateProv CA
strPostalCode 95113
strCountry 95113
strContact Andy Loong
strEmail aloong@ciphercloud.com
strPhone 408-663-5093
strFax
strContact2
strEmail2
strFax2
strPhone2
intCertNum 2261
strModuleName Cryptographic Module for CipherCloud Gateway
strPartNumber Software Version: 1.0
memModuleNotes When operated in FIPS mode
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL
strModuleType Software
strValidationDate 10/01/2014;05/03/2016
intOverallLevel 1
memIndividualLevelNotes -Physical Security: N/A ;-Mitigation of Other Attacks: N/A ;;;-Operational Environment: Tested as meeting Level 1 with CentOS 6.3 with Java JRE 1.6.0 running on IBM 3620 M3 (single-user mode)
strFIPSAlgorithms AES (Cert. #2339);
SHS (Cert. #2017);
HMAC (Cert. #1449);
DRBG (Cert. #303);
PBKDF (vendor affirmed)
strOtherAlgorithms AES-PCBC (non-compliant);
AES-CTR (non-compliant);
AES-CTS (non-compliant);
AES-OFB (non-compliant);
AES-OFB8 (non-compliant);
AES-OFB128 (non-compliant);
ARC4;
Blowfish;
DES;
Diffie-Hellman (non-compliant);
DSA (non-compliant);
RC2;
RSA (encrypt/decrypt);
Triple-DES (non-compliant);
PBEWithMD5AndDES;
PBEWithMD5AndTripleDES;
PBEWithSHA1AndDESede;
PBEWithSHA1AndRC2_40;
MD2;
MD5;
SHA-384 (non-compliant);
HMAC-MD5;
HMAC SHA-384 (non-compliant);
HMAC SHA-512 (non-compliant)
strConfiguration Multi-chip standalone
memModuleDescription The Cryptographic Module enables all cryptographic operations performed by the CipherCloud Gateway. The CipherCloud Gateway is a software solution that organizations deploy within their network boundaries or delegate operation to a trusted third party. CipherCloud interfaces with clients (e.g., web browsers, mobile applications, APIs, etc.), and leverages format and operations preserving encryption technology to secure sensitive information in real time, before it's sent to cloud applications (e.g. web servers, API services, databases, etc.), without impacting usability or performance.
intModuleCount 1
memAdditionalNotes Updated vendor POC information.
strFirstValidtionDate 10/01/14 00:00:00
strLabName ADS
strValidationYear 2014